CVE-2002-0622

Published: Jul 3, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing the commands as input to the OWC package installer, aka "OWC Package Command Execution".

Affected (3)

Products: Microsoft: Commerce Server

Microsoft

1 product

Commerce Server

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Microsoft Commerce Server	Version 2000
Microsoft Commerce Server	Version 2000 sp1
Microsoft Commerce Server	Version 2000 sp2

References (8)

http://www.iss.net/security_center/static/9425.php

Source: cve@mitre.org

http://www.osvdb.org/5170

Source: cve@mitre.org

http://www.securityfocus.com/bid/5111

Source: cve@mitre.org

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033

Source: cve@mitre.org

http://www.iss.net/security_center/static/9425.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/5170

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/5111

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.